CVE ID:	CVE-2002-0869
Description:	Unknown vulnerability in the hosting process (dllhost.exe) for Microsoft Internet Information Server (IIS) 4.0 through 5.1 allows remote attackers to gain privileges by executing an out of process application that acquires LocalSystem privileges, aka "Out of Process Privilege Elevation."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2002-0869 Bugtraq: 20021104 [A3SC] MS IIS out of process privilege elevation vulnerability(A3CR@K-Vul-2002-06-002) (Google Search) http://marc.info/?l=bugtraq&m=103642839205574&w=2 Computer Incident Advisory Center Bulletin: N-011 http://www.ciac.org/ciac/bulletins/n-011.shtml http://www.li0n.pe.kr/eng/advisory/ms/iis_impersonation.txt Microsoft Security Bulletin: MS02-062 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-062 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A929 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A930 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A983 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0059.html XForce ISS Database: iis-outofprocess-privilege-elevation(10502) http://www.iss.net/security_center/static/10502.php